mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2025-07-24 15:25:23 -04:00
disable unprivileged userns for regular kernels
This commit is contained in:
parent
87db85274a
commit
5eead0ad5a
1 changed files with 2 additions and 0 deletions
|
@ -20,6 +20,8 @@ vm.mmap_rnd_compat_bits = 16
|
|||
|
||||
kernel.kptr_restrict = 2
|
||||
|
||||
kernel.unprivileged_userns_clone = 0
|
||||
|
||||
kernel.unprivileged_bpf_disabled = 1
|
||||
net.core.bpf_jit_harden = 2
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue